Confidentiality in HR: What You Can Share, What You Can't, and How to Decide

60-Second Summary

There are four levels of HR information — knowing which one you're holding determines who you can tell.
Default rule: 'need to know, on the record' — share only with people who need it, and write down what you shared.
Anonymous ≠ confidential. Promising anonymity you can't deliver is the fastest way to lose employee trust.
Legal hold trumps every confidentiality promise — including ones you made in good faith.

Confidentiality is the load-bearing trust of the HR function. Get it right and employees bring you their hardest problems early; get it wrong and your inbox goes silent.

Why this is HR's hardest skill

Almost every conversation HR has is asymmetric: the employee shares something sensitive, and HR has to decide who else legitimately needs to know. There is no neutral choice — both over-sharing and under-sharing cause harm.

The four levels of HR information

How to classify what you just heard

Level	Examples	Default audience
1. Public	Job titles, start dates, public org chart	Anyone
2. Internal	Manager, team, work email, working hours	Anyone with a legitimate work reason
3. Restricted	Comp, performance rating, leave reason, disciplinary record	Manager, HR, payroll, on need-to-know
4. Highly confidential	Health information, harassment reports, investigations, legal matters	Named investigator, legal, HR lead — written log

Need-to-know, applied

Five-question test before you share

1
1. Who is asking?
Manager of the employee? Skip-level? Cross-functional partner? Each has a different entitlement.
2
2. What decision will it inform?
If there is no decision, there is usually no need to know.
3
3. What is the minimum that answers it?
'They are on leave until X' is almost always enough — the reason is usually not.
4
4. Is the employee comfortable with this sharing?
Where possible, ask. Always tell them what you shared and with whom.
5
5. Is there a written record?
If you can't write it down, don't share it verbally either.

Anonymous vs confidential

Two very different promises

Confidential

Identity may be known to HR / investigator
Shared only with named decision-makers
Required for most fair investigations
Realistic and defensible

Anonymous

Identity not known to anyone
Almost impossible once an investigation starts
Often required by whistleblower channels
Don't promise it casually

The most common HR mistake

Promising 'this stays between us' to an employee describing harassment. The moment the report is credible, you have a legal duty to act — and that includes naming the reporter to the investigator.

Scripts for the awkward asks

Manager: 'Why is X out?' — 'X is on approved leave. I can't share the reason; please plan coverage as if it's open-ended unless they tell you otherwise.'
Peer: 'Did Y get a raise?' — 'I don't discuss anyone's individual comp. If you have questions about your own, let's book time.'
Skip-level: 'I heard there's a harassment complaint.' — 'I can't confirm or deny that. If you've seen something, here's how to report.'
Employee: 'Promise you won't tell my manager.' — 'I can promise we'll share only what's needed. I won't promise silence I can't deliver.'

When confidentiality breaks

Legal hold or subpoena — you must preserve and produce
Imminent risk of harm to self or others
Statutory reporting (e.g. safeguarding, certain harassment reports)
Whistleblower process explicitly requires disclosure to a regulator
Court-ordered discovery in litigation

The documentation habit

Every restricted or highly-confidential conversation gets a short written note — date, who was present, factual summary (not opinion), next step, and who was told. The note lives in the case file, not your DMs. This single habit is what separates HR people who keep their jobs from those who don't.

References

EEOC — Confidentiality in investigations — EEOC
ACAS — Conducting investigations — ACAS
ICO — HR data protection guidance — ICO

Written by Pawan Joshi.Sources cited inline.

First published 16 Jun 2026See site changelog →